Personal Data Protection Board
Decision Date :16.05.2019
Decision No:2019/144
As a result of examination regarding the data breach which stems from hardware and software misconfigurations and inadequate security measures and notified to the Board in 25.10.2018, the Board decided;
1.to impose an administrative fine of 450.000 TL to the Company for not taking necessary technical and organizational measures to ensure data security within scope of the Article 12(1) of the Law.
2.to impose an administrative fine of 100.000 TL to the Company for not notifying the breach to the Board within the shortest time in line with the Article 12(5) of the Law.
